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(54) Communications network traffic reporting system 

(57) A system identifies transmission routes 
between a user and a desired destination site on a net- FIG. 3 

work. The system then detects transit characteristics for 
each of the transmission routes. A user can request the 
level of activity on the routes. Thus, the user can be 
apprised of the existence of possible congestion in any 
attempt to access the desired destination site. 
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Description 

BACKGROUND OF THE INVENTION 

The present invention provides information to a 5 
user about network traffic to selected sites on the Inter- 
net. In particular, the present invention is directed to 
providing a service by which users of the Internet can 
be apprised of potential congestion from various Inter- 
net access points to web sites of interest. 10 

The Internet has become a powerful tool that pro- 
vides its users with tremendous capabilities to search 
for and obtain desired pieces of information. As more 
and more users have found benefits on the Internet, 
more and more information points have also been pro- 15 
vided, typically in the form of web sites. These sites pro- 
vide the user with different types of information. Some 
of these sites are exceptionally popular and are in high 
demand for access. As a consequence, those sites can 
be heavily burdened at various times during the day. 20 

In addition, a business of providing Internet access 
has developed. There are many access providers that 
provide their subscribers with one or more entry points 
into the Internet. An example of this is shown in FIG. 1 
where a user 101 is connected to an Internet access 25 
provider 102 which in turn provides the user with a path- 
way to the Internet 103. As a consequence, the user 
can communicate with the web site 104. 

Once a subscriber has entered the Internet and 
desires to be in communication with a given site, the 30 
subscriber must be routed to that site. All routing typi- 
cally takes place via multiple intermediate points also 
known as routers. An example of such a construction is 
illustrated in FIG. 2. 

An Internet access provider 202 has two access 35 
points into the Internet, 202A and 202B. A subscriber to 
this provider may be interested in communicating with 
web site 210. The subscriber may be routed to the 
desired web site in any number of ways. For example, 
the subscriber may be routed from entry point 202A to 40 
node A (also known as a router) in the Internet. Then 
the subscriber could be routed to node C, node D and 
ultimately to the desired web site. Each node has the 
intelligence to be able to select what it perceives to be 
the most efficient way to transfer the subscriber from 45 
that node to its ultimate destination. That intelligence is 
somewhat limited. Typically the routing decisions are 
not based on actual load conditions since this would 
involve extremely complex calculations. Instead the 
decisions may be based on knowledge of network topol- so 
ogy. ©-9-. disabled routers, lines coming up or going 
down. The subscriber in question could alternatively be 
routed from the entrance way 202A to node A then to 
node B then to node C, node F, and finally to node D 
before being placed into contact with the desired web 55 
site. Each of these links between nodes is referred to as 
a hop. Some of these links are very high traffic links 
because they act as main through-ways between critical 
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nodes. Alternatively, they could be links which are more 
closely associated with or coupled to popular web sites. 
In this case, then the popularity of the associated web 
site results in increased traffic on that link. 

Normally, the user is assigned to an Internet access 
point in accordance with the user's location with respect 
to the Access Provider's entry points. It is desirable for 
users to be able to know how congested the traffic route 
is from their entry point onto the Internet to a web site of 
interest. 

SUMMARY OF THE INVENTION 

The present invention provides a method for period- 
ically analyzing the congestion along routes from an 
access provider's entry point into the Internet to desired 
web sites. The congestion information is stored in one 
or more access provider service database platforms. A 
user is automatically provided with an indicator which 
highlights the availability of a congestion-reporting serv- 
ice. The user can then select a web site of interest and 
see the congestion along routes to that web site from 
the access provider. In addition, the user may be given 
the option to designate a particular web site as being of 
interest to obtain information related to that site. 

The present invention takes advantage of a simple 
command already available on the Internet for tracing 
routes to a particular destination. The present invention 
repeatedly executes this command with respect to one 
or more web sites of interest and compiles critical infor- 
mation about the transit characteristics from an entry 
point into the Internet to the desired web site. Such 
characteristics can include round trip time between an 
Internet access point and routers along a path to the 
desired web site. The characteristics also can include 
an average of the number of data packets lost along a 
route during execution of the command. The transit 
characteristics are compiled and analyzed to provide 
the user with useful information about congestion along 
routes to the web site of interest. The analysis may 
include identifying particular hops at which there is likely 
to be congestion based on the average round trip delay 
and packet loss information that becomes available 
from execution of trace route. 

In addition, for those service providers having mul- 
tiple entry points into the Internet, it is possible this con- 
gestion information could be used to make an optimal 
selection of the entry point for the subscriber of interest 
based on the web site to which they seek to communi- 
cate. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a schematic diagram of a known network 
arrangement. 

FIG. 2 is a schematic diagram showing elements of 
FIG. 1 in greater detail. 

FIG. 3 is a schematic diagram of a network 
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arrangement incorporating an embodiment of the 
present invention. 

FIG. 4 and FIG. 5 are flowcharts for explaining a 
service process in accordance with the present inven- 
tion. 5 

DETAILED DESCRIPTION 

As described in the Background section, FIG. 2 
illustrates a known configuration representative of the w 
networking connections between an Internet access 
provider's access point and a particular web site. In 
accordance with the present invention, one or more 
important destinations are selected from known popular 
sites. Alternatively, the popularity of a given site may be 75 
determined in accordance with the traffic monitoring 
operation which is described below, i.e., the access pro- 
vider may semi-randomly select sites (e.g., based on 
such criteria as known number of hits on a historical 
basis to a given site and may then study the traffic to the 20 
selected web sites). Then, based upon the monitoring of 
the traffic, the access provider may determine that some 
sub-set of web sites are of particular interest. In the 
alternative, a site may be selected based on its mention 
in the popular media or on major on-line sources and 25 
could be treated as the "cool site of the day". 

Next the access provider identifies the various con- 
nection points into the Internet which are available 
through that provider. Then the provider uses standard 
tools to detect transit characteristics between a given 30 
entry point into the Internet and one of these predeter- 
mined important destinations. The operation of the tool, 
"the traceroute command", will be described in further 
detail below. However, the execution of this command 
provides important information about the hops between 35 
end points, round-trip transmission time between each 
of a plurality of links from an entry point into the Internet 
to the desired web site, and the frequency with which 
data packets are lost or dropped. 

It should be noted that the selection of a pathway 40 
from one entry point to the web site is actually a 
dynamic process that can change over time. The path- 
way is determined by intermediate decisions made at 
the various nodes as the connection is being estab- 
lished. For instance, at time T1 node A performs a cal- 45 
culation of the most appropriate route for traversing the 
net to web site X and thus establishes a link with node 
C. At some later time T2 node A may determine that the 
most appropriate route really calls for a link to node G 
rather than node C. As described earlier the routing so 
decisions are typically made based on information 
about network topology, e.g., the status of certain lines 
either coming up or going down. These preferential 
selections of establishing node links or hops generally 
remain stable for a few minutes. Thus, the execution of 55 
this feature by the present invention will provide snap 
shots over time of the congestion of the network. To be 
a useful information source the congestion must be 



monitored on a periodic basis to capture those changes 
in routing that occur over time. In accordance with the 
present invention this could be done 5 or 6 times an 
hour for example. 

The gathering of transit characteristics from a par- 
ticular entry point to a desired web site will now be 
described. 

The traceroute command is a well known command 
for tracking the routing of a connection from one point to 
another on the Internet. The traceroute command actu- 
ally tries to transfer a packet across various points on 
the Internet from a starting node to a destination node. 
The command will be set with a definition of the maxi- 
mum number of hops, i.e., intermediate links, which are 
permissible between the two termination stations. Fur- 
thermore, the command will determine the size of the 
data packet to be transferred. 

In the example described below the traceroute 
command is run to a popular site on the web, namely 
www.netscape.com. The command is set so that the 
default number of maximum hops is thirty and the 
packet size is set at 40 bytes. 

In actual execution, the command builds the route 
in a series of repeated operations. First, the system will 
prescribe a one hop transfer and it will attempt this 
transfer a predetermined number of times selectable by 
the party executing the command. It will detect round- 
trip transmission time to the first hop that is selected for 
each access. Then two hops will be permitted and since 
the command is running so quickly the routing will be 
through the first node accessed through the first hop 
and a second node. The round-trip transmission time 
will again be detected. This operation of permitting one 
additional hop per execution of the route checking will 
be continued until connection is established to the 
desired web site. 

The results of one execution of this traceroute com- 
mand are shown below. 
$ traceroute www.netscape.com 
traceroute to www1.netscape.com (198.95.251.30), 30 
hops max, 40 byte packets 

1 ged (135.104.104.1) 3.526 ms 33.635 ms 
106.099 ms 

2 hubble-rbone (135.104.1.7) 3.404 ms 5.828 ms 
5.034 ms 

3 stile (135.104.2.7) 189.526 ms 128.351 ms 
45.663 ms 

4 1 92.20.225.1 (192.20.225.1) 57.516 ms 59.227 
ms 14.097 ms 

5 New-Brunswick1.NJ.ALTER.NET 
(137.39.186.161) 28.3 ms 24.363 ms 20.82 ms 

6 137.39.108.3 (137.39.108.3) 22.781 ms 26.802 
ms 22.328 ms 

7 137.39.100.14 (137.39.100.14) 21.764 ms 
29.485 ms 24.06 ms 

8 137.39.33.99 (137.39.33.99) 26.63 ms 29.819 ms 
27.685 ms 
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9 137.39.100.29 (137.39.100.29) 34.992 ms 
33.063 ms 36.249 ms 

10 sprintnap.mci.net (192.157.69.11) 37.336 ms 
225.073 ms* 

11 -hssi3-0.WestOrange.mci.net (204.70.1.209) 5 
70.656 ms 248.1 ms 238.202 ms 

12 core 2. SanFrancisco.mci.net (204.70.201) 
313.694 ms 212.713 ms 113.834 ms 

1 3 *borderx2-fddi-1 .SanFrancisco.mci.net 
(204.70.158.68) 186.739 ms* 10 

14 204.70.158.122 (204.70.158.122) 167.243 ms 
236.737 ms 244.549 ms 

15 www1.netscape.com (198.95.251.30) 102.303 
ms 105.281 ms 99.058 ms 

15 

This command gives three valuable pieces of infor- 
mation. First, it identifies each router, e.g., "hubble- 
rbone M at hop 2. Second, it provides a number of round 
trip time values to a given router from the starting point. 
Third, it indicates when data packets are lost. For exam- 20 
pie, it is seen then that the first node identified as ged, 
having a routing identifier 135.104.104.1, is accessed 
three times with varying round-trip transit times. The 
second node - hubble-rbone (135.104.1.7) is then ana- 
lyzed. This continues until by step 15 connection is 25 
made to wwwl .netscape.com, the final desired destina- 
tion. During the testing some packets are dropped. This 
is indicated in each path test by an asterisk (*) in place 
of a round-trip time. 

In the present example, the round-trip time 30 
increases dramatically at hops 10 and above. At hop 
nine the times range from 33.063 ms to 36.249 ms. 
However, at hop 10 one round-trip time is 225.073 ms 
and one data packet is lost or dropped. The significantly 
higher round-trip times and the possibility of dropping 35 
packets continues from hop 10 to hop 15. As a conse- 
quence of this analysis, the Internet access provider 
can understand that there is congestion at hop 10 so 
that through-put will not be great on this path. 

A second example is shown below with respect to 40 
tracing the route to the mail server for Cambridge Uni- 
versity in the UK. 
$ traceroute ppsw3.cam.ac.uk 

traceroute to ppsw3.cam.ac.uk (131. 11 1.8.38), 30 hops 
max, 40 byte packets *s 



16.756 ms 206.483 ms 

8 137.39.33.99 (137.39.33.99) 130.227 ms 
162.452 ms 21.052 ms 

9 137.39.100.29 (137.39.100.29) 42.83 ms 33.61 
ms 38.147 ms 

10 f0-0.enss219.t3.ans.net (192.157.69.13) 34.262 
ms 28.245 ms* 

1 1 h2-0.t32-0.New-York.t3.ans.net 
(140.223.33.129) 75.049 ms 36.288 ms 76.362 ms 

12 h5-0.t36-1 .New-York2.t3.ans.net 
(140.223.33.10) 131 .381 ms 50.834 ms 47,809 ms 

13 f0-0.c36-1 1 .New-York2.t3.ans.net 
(140.223.36.222) 47.26 ms 59.422 ms 33.59 ms 

14 Dante-UKERNA.t3.ans.net (204.151.184.26) 
233.183 ms 200.409 ms* 

15 smds-gw.ulcc.ja.net (193.63.94.12) 211.977 ms 
222.577 ms 216.284 ms 

16 smds-gw.cam.ja.net (193.63.203.36) 237.009 
ms 337.539 ms* 

17 route-cent-1.cam.ac.uk (131.111.1.62) 212.342 
ms* 208.946 ms 

18 mauve.csi.cam.ac.uk (131.111.8.38) 234.515 
ms 266.596 ms* 

In looking at this outcome, it is fairly clear that 
packet loss problems develop from hop 14 onward. In 
fact, about a third of the packets are being dropped from 
hops 14 and onward suggesting very poor performance. 
This is inclusive of some sort of congestion problem. 

The raw data pertaining to each of the access pro- 
vider's entry points into the Internet could be gathered 
in a number of ways. For instance, the Access provider 
can hang an "agent" off of each entry point. These 
agents are shown as 320A and 320B in FIG. 3. Each 
agent would include a programmed processor and stor- 
age capabilities. The program would perform the steps 
described below in connection with FIGS. 4 and 5. Each 
agent would then independently execute the data gath- 
ering operation and process it as described below to 
make it available to the users assigned to that entry 
point. Alternatively, the provider could provide a central- 
ized data gatherer which gathers the transit characteris- 
tics for each entry point. 

To assure that the snapshots of routing congestion 
are accurate over time the agent would periodically 
cycle through a list of desired destinations so that the 
command is executed with respect to each destination 5 
or 6 times per hour. 

The above describes how information is gathered 
with regard to connection across the Internet. The 
present invention then compiles this information and 
derives transit characteristics between the selected ter- 
mination points. This transit characteristic information is 
stored in an access provider database or databases. 
The information can be stored in various forms. For 
instance, the raw data regarding round-trip transmission 
times and lost packet data could be stored in the data- 
base. Alternatively, calculations or estimations could be 



1 ged (135.104.104.1) 3.114 ms 2.421 ms 2.275 
ms 

2 hubble-rbone (135.104.1.7) 3.627 ms 81.969 ms 
3.752 ms so 

3 stile (135.104.2.7) 9.485 ms 3.885 ms 7.703 ms 

4 192.20.225.1 (192.20.225.1) 12.176 ms 8.176 ms 
6.123 ms 

5 New-Brunswick1 .NJ.ALTER.NET 
(137.39.186.161) 21.963 ms 20.066 ms 48.494 ms 55 

6 137.39.108.3 (137.39.108.3) 75.51 ms 118,478 
ms 22.67 ms 

7 137.39.100.14 (137.39.100.14) 62.625 ms 
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made based on the detected data and the database 
could store information about the status of links to a par- 
ticular web site, e.g.. heavily congested, mildly con- 
gested, clear, etc. 

In one possible embodiment the calculations iden- 
tify hops where congestion occurs by analyzing the 
average round trip times and the average number of 
data packets lost over the hops. The analysis would 
include examining the data to determine at which hops 
the average round trip time and/or average number of 
packets lost increased in a rapid or spike like manner. In 
the first example above in which a route to net- 
scape.com is traced, the average round trip time is 
smoothly increasing from hop 1 to hop 9. But at hop 1 0 
it makes a dramatic jump upward and stays high for sub- 
sequent hops. This is an indicator that the hop is con- 
gested. The same can be said with respect to an 
increase in the frequency of losing data packets. Thus, 
this analysis provides the access provider with an indi- 
cator of whether a route to a web site is congested and 
what link along the route is likely to be responsible. Nat- 
urally, the database could store combinations of these 
types of information and provide the end user with the 
appropriate calculated information based on the raw 
data collected from the execution of the traceroute com- 
mand. 

Once the information is obtained, the provider must 
have a way of presenting the information to the end 
user. 

In accordance with the present invention, in one 
embodiment when the subscriber informs the access 
provider that connection to the Internet is desired, the 
provider automatically provides a "page" for viewing that 
gives the subscriber a number of options for available 
services. One such option could be a traffic reporting 
option suggested by some graphic item, for example a 
helicopter icon. Once the subscriber selects the traffic 
reporting icon, the access provider database could pro- 
vide various menu items to the subscriber, for instance, 
a user file which includes destination preferences. 
These destinations could be presented to the user as 
possible termination points for which traffic information 
is desirable. Once the user selects the desired end des- 
tination, the database accesses the traffic information 
associated with that destination site. 

Another option under the traffic reporting service 
would be to analyze the transit characteristics to each of 
the desired web sites and calculate peak load and low 
load time frames with the intention of providing advice to 
the subscriber as to the best time to connect to a given 
web site. This could be done in conjunction with a day 
evening monitor program (daemon) which is known in 
the art. In accordance with such a program the conges- 
tion along routes is tracked during the course of a day to 
determine the times of heaviest and lightest traffic. 

In yet a further modification to the service available 
to the end user, the access provider could optionally 
provide a map-like representation of the routing from 



the multiple access points to the desired web bite with 
information about each of the routing options. In the 
present configuration of the Internet, the user has little 
choice as to how a call is routed to a given web site. 

5 However, the statistical information gathered about the 
routing from any one of the plurality of entrance points 
to the desired web site might be used by the Internet 
access provider itself to optimize the user's connection . 
into the Internet. For example, if it was determined that 

w the routing from access point 203 through nodes G, F 
and D to the web site as shown in FIG. 2, was less con- 
gested than via hops A to C and C to D originating from 
entry point 202, then the access provider could opt to 
connect the subscriber into the Internet through access 

75 point 203 rather than access point 202 regardless of the 
geographical position of the subscriber with respect to 
these two entry points. 

The present invention could be supported by soft- 
ware developed to compile the transit characteristic 

20 information from multiple executions of the traceroute 
command to selected destination sites in accordance 
with the flow charts of FIGS. 4 and 5. 

In particular, the software should identify destina- 
tion sites of interest, step 401 . Then it must detect traffic 

25 status between a selected entry point into the Internet 
and a site of interest, step 402. Then it must store 
detected traffic information in an access provider data- 
base, step 403. 

The detection operation is performed in accordance 

30 with the steps set forth in FIG. 5. In particular, the detec- 
tion agent executes "traceroute" from the selected entry 
point to the selected web site, step 501 . Software then 
analyzes the average roundtrip time given for each hop 
in the results obtained from executing "traceroute", step 

35 502. Next, the software analyzes the average number of 
lost packets for each hop as given by the results 
obtained from executing "traceroute", step 503. Next, 
the software characterizes the traffic level to the web 
site and identifies congestion points based on the previ- 

40 ously detected data, step 504. 

Furthermore, the software would develop the 
appropriate presentation style for the information, for 
example, the presentation of the service button and the 
menu routine to be provided to the subscriber to facili- 

45 tate usage of the service. All of these modifications are 
well within the skill of those in the art. 

The present invention uses well known tools to 
gather pertinent information about congestion to web 
sites of interest and then presents this information in a 

so logical and efficient fashion so as to apprise subscribers 
of the congestion they are likely to face to a given web 
site, what link or links are the likely source of the con- 
gestion and to advise subscribers of the best times to 
attempt to access a particular web site. In addition, the 

55 present invention provides useful routing information for 
the Internet access provider itself so that it can optimally 
select an entry point into the Internet for a given sub- 
scriber and the web site of interest. This compiled and 
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analyzed transit characteristic information might also be 
the foundation for other services to advise the user and 
the access provider itself of critical information about 
the health of the network in terms of its ability to provide 
throughput to particular web sites. 5 

Claims 



9. The method of claim 1 comprising the further steps 
of: 

analyzing said transit characteristics informa- 
tion to determine historical activity level; 
storing said historical activity levels for access 
by network users. 



A method for advising users of a communications 1 0. A method for selecting an entry point into a first net- 
network of a level of activity on the communications 10 work from a second network comprising the steps 
network, the method comprising the steps of: of: 



a) selecting a destination site; 

b) selecting an entry point into the network; 

c) tracing a transmission route from said entry is 
point to said destination site and gathering 
transit characteristics information regarding 
said transmission route; 

storing network activity status based on 
said transit characteristics; 20 

receiving a request for a level of activity 
on said network related to said destination site; 

reporting activity status based on said 
stored network activity status, in response to 
said request. 25 

2. The method of claim 1 wherein said transmission 
route comprises a plurality of links and at least one 
intermediate point between said entry point and 
said destination site. 30 



8. The method of claim 7 comprising the step of cus- 55 
tomizing the menu of destination sites of interest 
based on user preferences. 



a) designating a first entry point into the first 
network; 

b) selecting a destination site in the first net- 
work; 

c) tracing a transmission route from the desig- 
nated entry point to said destination site and 
gathering transit characteristics information 
regarding said transmission route; 

d) storing activity data for a route between the 
designated entry point and said destination 
site; 

e) designating a second entry point into the first 
network and repeating steps c) and d) for a 
route to said destination site; and 

f) upon receiving a request to access said des- 
tination site, selecting an entry point into the 
first network based on said activity data. 

11. The method of claim 10 wherein said transmission 
route between an entry point and said destination 
site comprises a plurality of links and at least one 
intermediate point between said entry point and 
said destination site. 

12. The method of claim 10 wherein said step of gath- 
ering transit characteristics information comprises 
the step of detecting round-trip transmission time 
for each of said plurality of links. 

13. A method of reporting congestion level information 
associated with accessing a destination address of 
a data communications network, the method com- 
prising the steps of: 

monitoring traffic level on a plurality of links 
connecting an access provider network to the 
destination address of the data communica- 
tions network; 

storing on a storage device of said access pro- 
vider network information indicative of the traf- 
fic level for at least one of the links; and 
in response to a request from a user of the 
access provider network who wishes to access 
the destination address, transmitting said traffic 
level information to said user. 



3. The method of claim 2 wherein said step of gather- 
ing transit characteristics information comprises the 
step of detecting occurrences of packet loss along 
said-plurality of links. 35 

4. The method of claim 2 wherein said step of gather- 
ing transit characteristics information comprises the 
step of detecting round trip transmission delay for 
each of said plurality of links. 40 

5. The method of claim 4 wherein the network 
includes a plurality of destination sites of interest 
and comprises the step of repeating steps a), b) 
and c) for each destination site of interest. 45 

6. The method of claim 5 comprising the step of 
prompting a user to submit a request for a level of 
activity of said network. 



The method of claim 6 wherein said step of prompt- 
ing includes providing a menu of destination sites of 
interest. 
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14. The method of claim 13 wherein the monitoring 
step further includes the step of: 

detecting occurrences of packet loss on at 
least one of the links. 5 

15. The method of claim 13 wherein the monitoring 
step further includes the step of: 

measuring round trip transmission delay on at 10 
least one of the links. 

16. A traffic reporting system for a data communication 
network comprising: 

a computer which executes a daemon process 
to monitor traffic level on a plurality of links con- 
necting an access provider network to a desti- 
nation address of a data communications 
network; 

a storage device of the access provider net- 
work on which information associated with the 
traffic level on at least one of the links is stored: 
and 

means for transmitting to a user the information 
associated with the traffic level on at least one 
of the links in response to a request from the 
user for accessing the destination address. 

1 7. The system of claim 1 6 wherein the computer 30 
detects occurrences of packet loss on at least one 

of the links. 

18. The system of claim 16 wherein the computer 
measures round trip transmission delay on at least 35 
one of the links. 
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